Kerberos is a computer network authentication protocol which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner.
Questions tagged [kerberos]
170 questions
30
votes
2 answers
Does Firefox support wildcards in NTLM / Negotiate URI's for autologin?
Following this question about Windows Domain Authentication with Firefox, does FF support using wildcards in the URI's? I'm not finding anything where it mentions support either way.
squillman
- 8,551
25
votes
3 answers
Integrate kerberos and Keychain
It it possible to make kinit ask Keychain for password and not me?
tig
- 4,803
13
votes
2 answers
Mount Mac OSX server NFS from Linux LDAP?
I'm trying to mount an NFS share from Fedora 16. The server is Mac OS X Server, set up by my coworker. I believe it requires Kerberos/LDAP authentication, so I would start the (probably arduous) process of getting that figured out, but there's…
Chinasaur
- 231
13
votes
2 answers
How does Kerberos' preauthentication increase security?
This FAQ entry (and the RFC itself) states that pre-authentication addresses a weakness in initial implementations of Kerberos that made it vulnerable to offline dictionary attacks.
The FAQ state:
The simplest form of preauthentication is known as…
Aidan Steele
- 413
10
votes
4 answers
Google Chrome on Mac OS X with Kerberos
Is it possible to use Kerberized Websites with Google Chrome on Mac OS X?
loomi
- 505
- 1
- 5
- 9
9
votes
2 answers
How to install/enable ktpass.exe on Windows 7?
How can I install or enable the ktpass.exe utility on a Windows 7 workstation?
RyanHennig
- 241
9
votes
3 answers
Mount a Samba share using Kerberos ticket
I have a Samba server (which is the domain controller), and a Ubuntu 14.04 Client with a logged user who is authenticated by Kerberos (the client joined to domain with Likewise). The user want to access a network share with this command:
mount.cifs…
mbalint987
- 143
7
votes
4 answers
How to manually get a kerberos service ticket?
I've registred a SPN, now I want to try to get a ticket for it.
I know there is linux kvno to do that is there an analog on windows?
MaxNevermind
- 237
5
votes
1 answer
Cross realm kerberos authentication with ssh
How can I configure server wide cross realm authentication on an openssh server using kerberos without having to add principles for both realms in the .k5login file?
Iain Conochie
- 195
5
votes
2 answers
Kerberos Server and logs
I'm attempt to set up a Kerberos server, and am running into some sort of issue with the configuration message. Unfortunately, the daemon refuses to tell me what went wrong; it tells me to "see log file", but never mentions what log file.
# service…
Thanatos
- 2,542
5
votes
2 answers
Can't connect to my server using SSH Kerberos Auth on OSX 10.7
I just upgraded my Mac OS to 10.7 Lion. It has worked well before. But, only kinit working normally now, I can't ssh to my server.
After reinstalling the "Mac OS X Kerberos Extras", it didn't get better.
My command:
ssh root@10.3.18.211…
deemstone
5
votes
1 answer
mount.cifs: Any way to mount with kerberos using the machine credentials
When a Linux machine joins a domain, a computer account is created in Active Directory.
Can this account be used to mount a network share with cifs and Kerberos?
bbigras
- 501
4
votes
2 answers
Is it OK to have kerberos-sec port open to the Internet in Mac OS X?
I’ve just bought my first Mac I want to connect it directly to the Internet in a colocation facility.
Running nmap against it shows:
Starting Nmap 6.40 ( http://nmap.org ) at 2015-02-18 21:54 GMT
Nmap scan report for foo.bar (123.45.67.89)
Host is…
fadedbee
- 195
3
votes
2 answers
Samba Winbind not working in Debian 8
I am setting up a new samba environment based on Debian Jessie.
Installation of PDC was succesfully and Windows clients were able to join. Have a problem at joining the Linux clients.
I was following the tutorial SAMBA Share with Active Directory…
Luki
- 31
3
votes
1 answer
How can I enable Kerberos / GSSAPI authentication in Pidgin on Linux?
Some XMPP/Jabber servers (e.g. Openfire) support single-sign-on authentication using Kerberos. Pidgin claims to support this, but I was unable to find documentation on how to set it up.
ngroot
- 171